$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa File: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (raw, json) Hash identifier: WK/JV9u6bxzN5pWyJs08YddvdU/3rwCasfFO2UjwIic= Subject key identifier: F7:27:35:6E:01:1B:3F:F6:DB:4A:CA:E5:56:89:4D:6F:2A:12:BA:99 Certificate issuer: /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Certificate serial: 0C08 Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa Signing time: Sun 26 Jan 2025 18:36:50 +0000 ROA not before: Sun 26 Jan 2025 18:36:50 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 138534 IP address blocks: 103.132.88.0/22 maxlen: 22 103.132.88.0/23 maxlen: 23 103.132.88.0/24 maxlen: 24 103.132.89.0/24 maxlen: 24 103.132.90.0/23 maxlen: 23 103.132.90.0/24 maxlen: 24 103.132.91.0/24 maxlen: 24 2404:3440::/32 maxlen: 32 2404:3440::/36 maxlen: 36 2404:3440:1000::/36 maxlen: 36 2404:3440:2000::/36 maxlen: 36 2404:3440:3000::/36 maxlen: 36 2404:3440:4000::/36 maxlen: 36 2404:3440:5000::/36 maxlen: 36 2404:3440:6000::/36 maxlen: 36 2404:3440:7000::/36 maxlen: 36 2404:3440:8000::/36 maxlen: 36 2404:3440:9000::/36 maxlen: 36 2404:3440:a000::/36 maxlen: 36 2404:3440:b000::/36 maxlen: 36 2404:3440:c000::/36 maxlen: 36 2404:3440:d000::/36 maxlen: 36 2404:3440:e000::/36 maxlen: 36 2404:3440:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3080 (0xc08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D8E Validity Not Before: Jan 26 18:36:50 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=679680c1-830e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:41:7e:c2:1c:73:38:4f:b9:96:d1:dd:99: 11:6a:3b:f1:39:8a:00:92:91:77:24:cd:42:70:0c: c9:42:79:e1:70:71:df:9a:f6:16:54:b0:91:ff:05: 0b:59:c6:a3:98:88:f4:58:32:01:77:b9:b8:f6:6a: a5:58:20:f2:28:4f:16:bf:63:e8:21:ee:45:d7:25: c5:11:84:7e:95:81:7d:a2:38:a4:37:8f:31:29:e1: 1c:3d:6e:ec:1e:55:bb:d6:5b:83:1d:24:bc:a2:f6: a4:d7:c5:f7:45:84:4a:f1:c4:62:ed:3c:81:8d:02: 36:62:fd:88:60:6d:41:43:01:b0:c0:cd:ab:18:89: 95:fe:c9:6e:51:70:f4:30:1c:b3:4a:c5:26:da:72: 71:05:2b:fa:ca:e4:fd:8b:68:c1:f1:4e:f0:05:fc: 05:38:1b:30:09:88:3e:cc:6d:a9:00:86:dc:b0:0c: 58:a6:a9:85:72:41:cb:52:3b:3b:f3:4e:53:d9:6f: fa:62:06:90:03:80:00:bd:57:11:a0:08:5c:8d:d3: 80:c9:0b:a0:29:00:86:23:05:67:a6:43:bd:e4:4a: 46:af:03:ee:a6:5e:53:74:40:1b:0e:03:59:35:59: 87:cb:db:ef:3c:a9:1c:cf:1e:fe:20:9b:da:8b:d6: 6f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:27:35:6E:01:1B:3F:F6:DB:4A:CA:E5:56:89:4D:6F:2A:12:BA:99 X509v3 Authority Key Identifier: keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.88.0/22 IPv6: 2404:3440::/32 Signature Algorithm: sha256WithRSAEncryption 20:8a:91:e9:f8:b5:47:df:f2:07:42:d4:8c:09:99:48:f7:22: 51:24:8a:24:f1:69:aa:ec:8a:b4:01:89:df:38:8d:2f:16:32: be:ca:64:e6:01:e4:7a:c4:c1:01:a8:f7:ca:4f:3b:0b:c8:53: e7:4b:dd:fb:bd:11:cd:1b:1e:4e:f8:05:2e:d7:5d:fb:65:02: 95:8a:c0:a1:28:1a:0b:18:aa:0d:4a:3c:06:ad:b5:95:8d:22: e0:c6:c0:34:c7:9b:ec:83:81:99:a5:f9:b6:d6:8a:76:0d:5f: c9:aa:27:89:19:c2:c2:d4:e8:f3:d2:00:13:30:39:c3:63:74: c9:f1:e0:a1:67:b2:80:b7:e0:f8:81:8c:15:db:e2:8c:a2:55: 93:6c:20:cd:1f:da:48:aa:ef:23:29:4a:5a:1e:5c:ec:25:f9: b1:95:f3:2a:86:b2:5c:47:5c:3a:75:35:03:0d:1e:04:3f:f4: 00:f0:33:9c:1c:f0:29:d6:fb:32:8f:5a:61:98:15:b0:eb:c0: 38:88:61:11:f9:a1:97:f2:95:9f:05:85:95:78:69:b5:b3:fd: 36:ae:ad:fc:90:8d:75:5e:76:78:0d:9b:d6:d5:69:ae:f6:9a: 3c:18:e8:06:99:62:6b:83:64:8e:5d:53:9f:e4:fe:1e:6f:ec: 50:d8:d6:6a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREOEUxMTAvBgNVBAUTKDNGN0Q5QkJBRUQ3QzVCRkRCQkEzQTM0OUFCRTk2QjIx QUQyN0RBNjcwHhcNMjUwMTI2MTgzNjUwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk2ODBjMS04MzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1VBfsIcczhPuZbR3ZkRajvxOYoAkpF3JM1CcAzJQnnhcHHfmvYWVLCR/wUL WcajmIj0WDIBd7m49mqlWCDyKE8Wv2PoIe5F1yXFEYR+lYF9ojikN48xKeEcPW7s HlW71luDHSS8ovak18X3RYRK8cRi7TyBjQI2Yv2IYG1BQwGwwM2rGImV/sluUXD0 MByzSsUm2nJxBSv6yuT9i2jB8U7wBfwFOBswCYg+zG2pAIbcsAxYpqmFckHLUjs7 805T2W/6YgaQA4AAvVcRoAhcjdOAyQugKQCGIwVnpkO95EpGrwPupl5TdEAbDgNZ NVmHy9vvPKkczx7+IJvai9ZvvQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPcnNW4B Gz/220rK5VaJTW8qErqZMB8GA1UdIwQYMBaAFD99m7rtfFv9u6OjSavpayGtJ9pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQ4RS81ODlCOTMzQzA2 QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdfMjdvNk5KcS1scklhMG4y bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzMmJ1dTE4V18yN282TkpxLWxySWEwbjJtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzREOEUvNTg5QjkzM0MwNkE0MTFFQUIzQzY2QjM4QzRGOUFFMDIvQzlGRjJBN0Uw NkE1MTFFQUExRkZEQjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnhFgwDQQCAAIwBwMFACQENEAwDQYJKoZIhvcNAQELBQAD ggEBACCKken4tUff8gdC1IwJmUj3IlEkiiTxaarsirQBid84jS8WMr7KZOYB5HrE wQGo98pPOwvIU+dL3fu9Ec0bHk74BS7XXftlApWKwKEoGgsYqg1KPAattZWNIuDG wDTHm+yDgZml+bbWinYNX8mqJ4kZwsLU6PPSABMwOcNjdMnx4KFnsoC34PiBjBXb 4oyiVZNsIM0f2kiq7yMpSloeXOwl+bGV8yqGslxHXDp1NQMNHgQ/9ADwM5wc8CnW +zKPWmGYFbDrwDiIYRH5oZfylZ8FhZV4abWz/TaurfyQjXVedngNm9bVaa72mjwY 6AaZYmuDZI5dU5/k/h5v7FDY1mo= -----END CERTIFICATE-----Generated at Sat Apr 5 04:02:44 2025 by rpki-client